Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Mailbox Restore: Recurring Calendar Meeting Update: You do not have permission to send the message on behalf of specified user

Posted on 2014-03-12
10
Medium Priority
?
977 Views
Last Modified: 2014-05-05
We had one of our Exchange mailbox databases become corrupt and it was in a "dirty shutdown" state. We worked with Microsoft however it ended up that we had to restore the mailboxes on that database from backup from the night before.

After the restoration of the mailbox database, whenever users on this database try to send and update to a calendar invite they are receiving an error message that states "You do not have permission to send the message on behalf of specified user".

I have tried setting the "NT AUTHORITY\USER" permission for Full Access and Send As permissions to ensure that the user has full access on their mailbox and items.

Thanks for your assistance!
0
Comment
Question by:Lee Anderson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 3
10 Comments
 
LVL 42

Expert Comment

by:Adam Brown
ID: 39925071
NT AUTHORITY\SELF is the permission you would need to have on there. That said, make sure that the users have their reply address set to be the same as the address that those invites are being sent to.
0
 

Author Comment

by:Lee Anderson
ID: 39926217
Thanks for the reply. In conjunction with this mailbox crash, we did change our email domain due to a name change (lets calls the new email "user@domain2.com"). We kept the old email address (user@domain1.com) attached to each recipient mailbox as an alias and set the "user@domain2.com" as the primary SMTP. So prior to opening this question, I thought that this could have been a cause so I did go into one of the mailboxes affected, and unchecked the "Automatically update email addresses based on email address policy" option and set the "user@domain1.com" as the Primary SMTP address which I believe makes this the Reply To address.

This morning, I did verify that the "user@domain1.com" was still set as the primary email address however, when I ran the test it still failed with the same error.

I did verify that one of the mailboxes in question still contained the "NT AUTHORITY\SELF" for both "Send-As" and "FullAccess" permissions.

The add these permissions, I ran the following in Powershell and then verified in Exchange Management Console

get-Mailbox -server {ServerName} -ResultSize Unlimited | Add-ADPermission -User 'NT AUTHORITY\SELF' -ExtendedRights 'Send-as'
get-Mailbox -server {ServerName} -ResultSize Unlimited | Add-MailboxPermission -User 'NT AUTHORITY\SELF' -AccessRights FullAccess

Open in new window

Also, I should have mentioned that this is Exchange 2007.

Thanks
0
 

Author Comment

by:Lee Anderson
ID: 39926293
I just wanted to give an update. It appears that we have a problem with permissions sticking. I just went back into the same mailbox and checked the "Manage Send As Permission" option and now the "NT AUTHORITY\USER" is missing again.

It seems that when I add the permission within about 30 minutes it is removed.
0
Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39927644
Try moving an affected user to a new database.

Simon
0
 

Author Comment

by:Lee Anderson
ID: 39927773
I tried moving one of the mailboxes to a temporary mailbox DB and it has the same issue.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39928896
Does the problem occur with a NEW calendar entry?

Simon.
0
 

Author Comment

by:Lee Anderson
ID: 39928945
No it doesn't. New appointments are not affected.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39933983
In that case I would have to put it down as a side effect of the recovery operation and the items needs to be recreated. It may well have been a corruption that existing at the point of the backup being taken which wasn't seen.

Simon.
0
 

Accepted Solution

by:
Lee Anderson earned 0 total points
ID: 40032597
It was an issue with the items and their permission level after restoring. Unfortuantly I did not find a fix for this and the items had to be deleted using MFCMAPI and then recreated by the user.
0
 

Author Closing Comment

by:Lee Anderson
ID: 40041615
There was no solution provided except what we already knew.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

One-stop solution for Exchange Administrators to address all MS Exchange Server issues, which is known by the name of Stellar Exchange Toolkit.
Want to know how to use Exchange Server Eseutil command? Go through this article as it gives you the know-how.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Suggested Courses

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question